Urgent: Solaris newbie question: group permissions etc

Hi
I have a question on what is the best practice of working with solaris users and permissions. I'm using Solaris 10 and have created several users each with their home directory in /export/home. Then i have installed the sun webserver under /export/home/sun/webserver and i want all users to be able to use this, execute or copy over to the webserver.. would this be a valid solution or good practice solution tht i crete a group give it the permissions to read/write/execute and all the users i want to give this privilege to will be under this group. but then whats the use of having root like how would root user be different from the rest now...
thanks...

If you just want them to be able to publish to the web, apache has a little built in script in the httpd.conf that will hook in a user directory. Read the /etc/apache/httpd.conf file for more info.
Whether this is best practice I am not sure. What you suggest will work but I would avoid it.

Similar Messages

Domain Name settings in Solaris - Newbie question

Sorry for a newbie question!
I am already pointing a domain name to web hosting for email account. Now, I need an application server to run ERP software and Oracle, and installing Solaris and Oracle need a domain name.
If I point my domain name to the server, how do I receive emails from web hosting???
Install an email server to the application server instead? What can I do if I want the same domain name?

Your questions are completely off-topic for the forum.
These SunOS forums are for questions on "how do I install my OS"
You particular question is in the "how can I install Solaris while using the CD drive" forum.
So, if you had a question on how to edit the /etc/inet/hosts file to establish a FQDN on the computer, then it might be appropriate for the forum.
Unfortunately, I don't have a clue on where to redirect you, except perhaps to the Sun Java Enterprise System suite of applications?

Newb question - group by sequence number range

Hi - I'm a newb to pl/sql but am pretty familiar with t-sql and sql server.
Here's my question:
I have a database table with ~1.6M records, call it "a". a has two columns, id (a sequence) and status. status has three possible values: null, error and success.
I want to write a query that will group the sequence numbers into sets of 100k and give the the count of nulls, errors and successes for that set. The output should be something like:
set null error success
1-100,000 x y z
100,001-200,000 x y z
200,001-300,000 x y z
Can anyone point me in the right direction?

I scaled it down with a factor 1000, and here is the idea:
SQL> create table a
2 as
3 select level id
4 , decode(mod(level,3),1,'error',2,'success',null) status
5 from dual
6 connect by level <= 1600
7 /
Tabel is aangemaakt.
SQL> select trunc((id-1)/100)*100 + 1 lb
2 , trunc((id-1)/100)*100 + 100 ub
3 , count(decode(status,'error',1)) err
4 , count(decode(status,'success',1)) success
5 , count(decode(status,null,1)) "NULL"
6 from a
7 group by trunc((id-1)/100)
8 /
 LB UB ERR SUCCESS NULL
 1 100 34 33 33
 101 200 33 34 33
 201 300 33 33 34
 301 400 34 33 33
 401 500 33 34 33
 501 600 33 33 34
 601 700 34 33 33
 701 800 33 34 33
 801 900 33 33 34
 901 1000 34 33 33
 1001 1100 33 34 33
 1101 1200 33 33 34
 1201 1300 34 33 33
 1301 1400 33 34 33
 1401 1500 33 33 34
 1501 1600 34 33 33
16 rijen zijn geselecteerd.Regards,
Rob.

Newbie questions - Repair permissions?

Everyone on this forum talks about "repair permissions" - What is this? How do I do it? Why would I need to?
Thanks

Since people very rarely actually answer the question of what permissions are and why to repair them, I've put together a page about it. Hopefully it can clarify things a bit (or at least eventually evolve to do so . Check out http://www.bjoreman.com/permissions
20" Core Duo iMac, 12" Rev A Powerbook Mac OS X (10.4.6)

[urgent] some newbie questions about Sun application server

thank you for reading my post
1-what is equivalant folder in suna pplication server which act like Tomcat_home\webapps
its name -i think- is autodeploy folder
2-how i can mark a context as a "cross Context" cross context are acceable from outside web application context.

Your first question:
drop your file under s1as_home/domains/domain1/autodeploy.
For cross-context, see you need to add the property in WEB-INF/sun-web.xml:
http://docs.sun.com/source/819-0217/dgdesc.html#wp135273
table Table A-120 sun-web-app Properties
Hope that help.
-- Jeanfrancois

[Solved] Questions about /etc/group and /etc/gshadow

This morning, package filesystem was upgraded to 2015.02-1 and pacnew files were created for /etc/group and /etc/gshadow. I ran diff against my current files, and the differences seem very minor, to me. I need some guidance to understand whether I should implement the pacnew changes.
The only significant difference I see in the group file is that in my original version, my username is added to the wheel group. This seems correct, to me.
For gshadow, there is the same difference for wheel. However, there are several entries where my original entry contains an exclamation point, but the new version does not. For example:
< proc:!::
> proc:::
If I run man /etc/gshadow, it does not give me what I understand as a man page, and gives me what appears to be a listing of the stuff in my /etc/gshadow file, instead. Which does not help me.
So, like I say, I need some guidance on dealing with these pacnew files.
Tim
PS - I now see that "man gshadow" gives me an actual man page. Sorry. I am currently studying it.
Last edited by ratcheer (2015-02-24 21:37:52)

After the update to filesystem 2015.02-1 some voices in /etc/gshadow were changed (in the pacnew file) from
systemd-journal-gateway:!::
systemd-timesync:!::
systemd-network:!::
systemd-bus-proxy:!::
systemd-resolve:!::
to
systemd-journal-gateway:::
systemd-timesync:::
systemd-network:::
systemd-bus-proxy:::
systemd-resolve:::
What's the change? Before they had a locked password (the ! sign) and now they haven't?

Need info about group permissions

Hi All,
I'm confused with OIM group permissions for the following scenario.
Consider three groups G1,G2,G3 with the following permissions to a particular resource object RO.
G1 - Has all permission in all places for this RO(resource object,process form,process definition,etc)
G2 - Has only read permissions in all places for this RO.
G3 - Doesn't have any permission with respect to this RO.
And also "Provision by Object Admin Only" is selected for this RO and G1 is an object administartor.
Now I got the follwing result when I try to provision this resource object.
case 1:The actor(logged in user) is a member of G1 & G2 ------- Got this error "DOBJ.INSERT_PERMISSION_DENIED.You do not have permission to insert this object " and the provisioning operation is failed.
case 2:The actor is a member of G1 & G3 ----- Able to provision this resource object.
Now my question is, in case1 if OIM is denying the operation as G2 doesn't have insert or write permission then how come it is allowing the opertion in case 2 where G3 doesn't have any permission ?
Is this an expected behaviour or am I missing something ?
How OIM is handling the permissions for this operation ?
Thanks in advance.
Regards,
NS

I have the same problem here.. the issue we have is that some users have groups that give permissions, other group that are used by access policies and others for menu visibility. The last two aren't for permissions purposes but they impact on the effective rights of the users, because for example, when users try to revoke resource, OIM says that they don't have permissions. Do you figure a workaround to solve this problem?

Domain name settings - Newbie question

Sorry for a newbie question!
I am already pointing a domain name to web hosting for email account. Now, I need an application server to run ERP software and Oracle, and installing Solaris and Oracle need a domain name.
If I point my domain name to the server, how do I receive emails from web hosting???
Install an email server to the application server instead? What can I do if I want the same domain name? Any option?

Setting up a mailserver and making sure it doesn't suddenly turn into a spambox is not something you do with the use of a few commands. I suggest to dive into the Solaris admin guide on docs.sun.com and read up on e-mail and network services.
If that is asking too much of your time you'll be better off getting your ISP to handle all this for you.

Newbie Question: How much computer do I need?

Newbie Question:
I would like to use MainStage 3 in a live performance environment to play bars, parties, etc. I'm not looping, using it to playback recordings, processing outboard equipment or vocal processing. I want to stop carrying Rolands, Nords, Korgs, etc and get to a controller and a rack with a Mac Mini in it.
I tested a download of Mainstage 3 on my home Mac Mini (late 2012, 3.5 Ghz i5, 4GB RAM, 500GB drive) and it seemed to run fairly well. $30 well invested so I trekked forward... I purchased a Mac Mini (late 2009, 2.52GHz Core 2 Duo, 6GB RAM, 128GB SSD) for $200. I started to do more elaborate keyboard setups to see how the CPU would hold up. It typically runs from 30% to 50% of capacity (CPU and Memory) It actually boots and runs better than the i5. I hear the occasion gitch, but it actually seems to be getting better in time (or I'm rock and roll deaf.
I got a rack, an Airport Express, a Radial USB interface and a Nektar Panorama P6. It's starting to get expensive, but I'm emboldened by the actual quality for the sound and the flexibility of arranging for live performance. What used to take me two and three keyboards to play, I can now fit on one performance patch.
OK, now the question... am I at the limits of this little Core 2 Duo? Should I upgrade the i5 with more RAM and a bigger SSD and use that? Should I get a new(er) i7 and bite the $1,500 bullet for the additional RAM and SSD?
I see that most of you are running pretty nice Macbook Pros with i7 and lots of everything. My needs are modest; am I OK?
BTW, I want to run a Mac Mini in a box because I don't want to carry a laptop out in the open. If I was doing bigger shows I wouldn't care but I play some rowdy bars and constantly have folks hanging off me while I'm playing. It's fun, but hard on gear. If you can't drop it or dip it in beer, it won't last long where I work.
Matt Donnelly

Rule of thumb: newer and faster is better. But, depending the complexity of your needs you may be OK with an older Mac. Some glitches that happen in a live performance are due to loss of communication with USB or Firewire inputs, so make sure they're secure. I recently upgraded from a 2010 Mac Mini 2.6 dual core with 16 GB RAM, which was used live for nearly four years, to the latest Mac Mini 3.0 i7 with 16 GB RAM and a 500 GB SSD. I was getting an occasional stuck note with the older one. The new one is rock solid. Some of my patches may have up to a dozen channel strips mapped to three keyboards. The Mini is mounted in a rack next to a MOTU Ultralite Hybrid. It is a good idea to map a panic button on your keyboard to controller # 123(all notes off). Also, you might want to invest in a battery backup power supply(APC, Cyberpower, etc.-$40-$60) to protect your Mac against power loss, which can damage you hard drive.

Newbie question: ""dynamic"" casting

Hello all,
 
I have a quite newbie question. I have this class hierarcy:
 
A
|_A1
|_A2
|_A3
|_A4
|_A5
|_.....
 
in some part of my code I have this:
 
if (object1 instanceof A){
if (object1 instanceof A1) {A1 object2 = (A1) e;}
 if (object1 instanceof A2) {A2 object2 = (A2) e;}
 if (object1 instanceof A3) {A3 object2 = (A3) e;}
 if (object1 instanceof A4) {A4 object2 = (A4) e;}
 if (object1 instanceof A5) {A5 object2 = (A5) e;}
object2.callMethod();
 
Is there any way to do this type of casting just in one line? I mean, I just want to cast object1 to the class it is instanceof. If it is instance of A1, I want to be casted to A1, if it is A2 to A2, etc...
 
Thanks you in advance.

kamikaze04 wrote:
In fact I know what object1 is on execution time,Which doesn't help your compiler at all, when it's task to link and verify method calls.
because the code posted at the top is working well, i just want to avoid repeating that if's for all the new classes Ax I will create. Big "code smell" here.
In other words if i had from A1 to A200 i dont want to have 200 if's to cast it to the class it is and then execute it's method.You could call the method "doMagic()" and make it abstract in A. Then you can implement it in all Ax classes and would never have to worry about casting in the first place, because A.doMagic() would automagically do the right thing. Polymorphism.

UME actions and Group permissions

Hi there ,
New to portal and NWDI . How do you see what a UME action contains.
i.e. MANAGE_ALL . Do you need java skills or visual administrator to view.
Also, using NWDI.Administrators group , the group itself gives permissions
outsided of just having the NWDI.Administrator role. Where/How are the group
permissions defined ? Thank You
Dan.

Dan,
This is a good place to start: [Authorization Concept of the AS Java|http://help.sap.com/saphelp_nw04s/helpdata/en/44/7fdf2470a412d2e10000000a422035/frameset.htm]. The two roles are different. Security roles are part of the J2EE Standard. UME roles are collections of UME actions. The UME interface cannot show the J2EE roles.
Now as to the role that lets you look at system info, you are correct. As your test showed, this is not included in Manage.All. I just tried that myself. If you look in the visual admin, you see there is a security role called administrators assigned to the group Administrators. Now when the developers create a J2EE application they specify the name of the role that the user must have in order to access it. Often they use the name administrators. When the applications are deployed to the server, the AS Java consolidates all these roles into a single role with the same name, administrators, by role references. This is assigned to the Administrators group by default. This is done to make the life of the developer and the deployer easier. So System Info needs this role. Well, there are two keystore roles assigned by default as well, but I doubt these are the roles System Info is looking for. In SAP NetWeaver 7.1 you have more granular control. But that is another question.
I hope that helps.
-Michael

2 newbies question about diskgroups

Hi gurus,
I have 2 newbies question:
Im working in a RAC Database (11.2.0.3) on Redhat 5.3 with some disk groups. One of this groups have 6 disks on it with different space (134, 236G, 236G, 185G, 185G and 185G).
My questions are:
1) What would be happend when the lower space disk will be full?
2) At this moment the diskgroups are at 45% so i was thinking to change their spaces to have all with the same space (around 193G each), it would create any problem? i should restart database or can do it with database up?
Thanks

if a disk is filled, what would happen? could i resize the disks with same size without stop database and without affecting the data stored within each disc?
By the word 'disk' I assume you mean LUN . When a LUN in a disk group is filled, ASM will use the remaining LUNs to store the data. You should always use LUNs of uniform size to avoid uneven I/O .
could i resize the disks with same size without stop database and without affecting the data stored within each disc
You can get the Unix/Storage team to allocate more LUNs for this Server. Once these LUNs are added , check if the following pre-reqs are met for the LUN which is yet to be added to the disk group
v$asm_disk.HEADER_STATUS = 'CANDIDATE'
v$asm_disk.PATH = /dev/rdsk/youLUNname
v$asm_disk.NAME will be NULL
Now you can add the LUNs using
alter diskgroup DATA_DG01 add disk '/dev/rdsk/youLUNname' rebalance power 4 ; wait for rebalance to finish (check status in V$ASM_OPERATION)
Yes. The above can be done without stopping the DB. It won't affect the stored data either.

What is going on? My password works here but when I used it to check about find my phone, it got complicated, put in answer to question, get email, etc.

What is going on? My password works here but when I used it to check about find my iphone, it got complicated, put in answer to question, get email, etc.

No, dude, if this guy can use it, so can most of his other neighbors. Let's point out a few things:
1. This is very poor security, not to mention irresponsible of the neighbor to open his wireless to every person and pervert in his neighborhood!
2. This guy still has NO control over who's using is, so of course bandwidth will be affected
3. Until the neighbor locks it down to just 2 people, of course it will be slow
Let's start using our brains before we have the poor guy start deleting plists, getting the apple broadband utility, rebuilding his O/S, reinstalling the combo updates and/or repairing permissions (good one!) .... he simply has NO control over the speed of that which he's using/stealing.
Power Mac G5 Dual 2Ghz/iBook G4 1.42Ghz Mac OS X (10.4.7) 2.5 Gig, Rad 9800 Pro 256M

Question about permissions in portal content

Hi all,
I'd like to ask you guys a question about permissions given to pages in the portal content (EP 6.0).
When a user accesses a page that contains an iView (for example one for a Web Dynpro, or for a BSP), and the page permissions are correctly set for the user (or a group the user is member of), everything works fine and the user can see and use the application contained in the iView.
If the Page has no permissions set and the user tries to access this page, an empty page appears instead and the "Detailed Navigation" column appears on the left.
I know I should not let the user see the link to the page he is not authorized to use (this is done managing the roles given to the user), but I'd like to know from you if it is possible to show a message like "unauthorized user" instead of the empty page that appears.
Can you also tell me how to keep the "Detailed Navigation" column hidden on the extreme left?
Thank you for any hint you can give to me.
Lorenzo

Hi Lorenzo,
a way how you might go ahead and hide or show content for specific user groups is via roles merging (see documentation <a href="http://help.sap.com/saphelp_nw2004s/helpdata/en/53/89503ede925441e10000000a114084/content.htm">http://help.sap.com/saphelp_nw2004s/helpdata/en/53/89503ede925441e10000000a114084/content.htm</a>
In essence, this means that you create for example 2 roles (A and B): A contains some content everyone can see, B more secure content for another group. You merge those 2 roles via a merge ID - and if a user has both roles, he sees the content in this workset with all the navigation options. If somebody only has role A, he will only see this content.
Maybe this is someting that could help with you considerations (always depending on the number of items that are affected, this might be a useful way, or leading to too much confusion, because you have too much different roles).
Best regards
Jana

MEGA-Newbie Question

This has to be the most newbie of all newbie questions. Interestingly enough, it is the one that is most rarely answered in a non-technical way that the novice can understand.
What exactly do I need Motion for? What, in common-sense, regular-language terms, does it do?
My manuals tell me how to do all the things it does. But they assume I am an experienced editor (I'm an experienced filmmaker, but only just started working in editing) who already knows all the things that CAN be done and only wants to know HOW to do them in Motion. This is not me.
So, say I am making a 90-minute HDV feature music doc. I have footage, I have stills. I will need captions, titles and text on screen. I will need an end credit roll. What is it I will probably want Motion to do for me that FCP can't do on its own?
I'd appreciate an answer in somewhat non-technical language that addresses the practical use -- from a filmmaker's point of view -- of this no doubt amazing program.
Thank you.

hi Paul,
You are right you can do much of the things Motion does in FCP, but Motion takes them further and often makes them easier to do.
Briefly whereas FCP is generally for editing moving pictures from rushes to a coherent whole, Motion is used to composite or layers of moving pictures to make a new coherent whole picture.
So i plain words, you can meld different sources of video, stills text and other sources together to make a new end peice. You can animate text, warp pictures, create fires, smoke, hide bits ( masking), animate graphical elements. In short whenever you need to layer up multiple sources of imagery Motion is your man. Sure FCP can handle a lot of this, but Motion is designed specifically and only to do this, and does it very well. ( You would not want to edit in Motion!)
In your 90 minute example you could do it all in FCP and make it look very nice. But you might need to go the extra mile with the title sequence, perhaps the captions will have some kind of generic strap line ( lower third) under All these things could be done easier and better in motion. However you would not want to import the whole 90 minute programme into Motion and start throwing captions on it. Rather you would want to build each element ( strap line, animating titles, opening sequence etc) in Motion and then import them into FCP for the final mastering. Motion is for short sequences, and FCP is used to collect them all into one programme.
I make music commercials for a living, do all the cutting on FCP and build all the graphic elements in Motion, take a look at my site for some examples if you'd like,
http://www.moojoose.co.uk
Hope this helps you
regards
adam

Urgent: Solaris newbie question: group permissions etc

Similar Messages

Maybe you are looking for